$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json) Hash identifier: jgBVx0l97AFPB1jJe8iycI4io0eEHxQvhRnqNOYTolQ= Subject key identifier: 15:74:AE:5F:FD:F5:C1:9E:46:2F:6D:F3:A1:E7:22:4E:A7:C8:57:7B Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft Manifest number: 67 Signing time: Sat 19 Jul 2025 07:13:00 +0000 Manifest this update: Sat 19 Jul 2025 07:12:59 +0000 Manifest next update: Sat 26 Jul 2025 07:12:59 +0000 Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: tl/M5h/KoQlD/STmL77wy5wSgthDho77IejvMq+rIHU=) 2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: McJ+hP8GUu/Ld5Rarq2qGp1xUtwodZVqiVkbBVRJzkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816 Validity Not Before: Jul 19 07:12:59 2025 GMT Not After : Jul 26 07:12:59 2025 GMT Subject: CN=687b457b-3655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:59:1f:4b:69:19:89:38:32:92:f8:23:96: 12:e1:a1:b3:9d:76:23:cc:63:d1:64:2a:e3:c8:d8: ac:48:84:9a:9b:ab:2c:de:3f:57:81:09:51:8b:74: 77:66:9f:eb:3c:3e:b3:e5:d4:3f:00:2a:c9:0c:24: 08:52:21:f5:50:d6:28:d3:89:8d:49:8d:c8:16:34: a0:97:ef:56:13:8e:9f:fb:21:e0:25:45:07:16:11: 27:54:82:24:96:61:68:c4:c6:e8:94:a1:0d:e8:1b: be:a4:0f:32:93:6f:09:a1:a6:02:27:fb:03:ef:d8: 67:29:c4:be:e9:b1:e9:c1:10:ed:1f:7b:51:29:0a: 85:c8:48:66:22:eb:24:bd:eb:1a:a0:dd:73:fa:f5: 69:a2:50:9a:52:9e:f5:c5:47:34:ef:61:df:97:87: 6e:5a:d6:1b:49:c7:0f:e9:2e:8a:6d:31:0d:91:aa: 39:6d:5d:51:4e:e8:69:66:1f:0e:f2:70:56:18:2b: 35:c8:cd:c3:03:ce:6b:53:6a:f6:a5:85:74:5f:73: 10:ed:29:41:6d:2c:62:a1:62:7e:87:14:d3:dc:1a: 22:67:dc:f5:5c:ba:82:92:bf:be:60:4e:41:bc:fb: 58:0d:9c:e4:e1:de:2a:52:68:77:36:71:0f:56:87: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:74:AE:5F:FD:F5:C1:9E:46:2F:6D:F3:A1:E7:22:4E:A7:C8:57:7B X509v3 Authority Key Identifier: keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cc:04:80:10:50:7d:6d:88:25:eb:a9:b3:92:63:39:d6:25: e7:91:7d:28:4e:b2:62:c9:fc:9e:ee:48:dc:66:b7:7f:86:f3: 80:04:86:25:cb:71:37:a2:ab:12:6d:11:67:61:79:07:ec:94: c5:d4:ff:cd:f1:e8:bc:20:96:b1:05:1a:a4:44:a0:b6:9e:7f: 8f:29:f3:d8:7b:3c:db:54:fd:d0:6c:ce:63:c0:bc:c1:5b:3b: 12:7c:2c:16:a7:c2:be:b7:e3:47:0c:d7:69:49:fa:be:3e:d1: 6a:ad:89:e0:1b:8e:c7:7a:66:52:9d:3c:d2:d9:6d:7f:6d:20: ca:8f:20:95:5d:3c:b5:d1:3a:7b:59:77:c0:e5:26:c2:80:6d: bb:b8:28:93:54:e6:c8:c1:31:cd:c4:b0:39:c8:4d:39:f7:fa: 45:28:f6:a0:64:2c:e8:39:19:cf:e9:ed:22:5f:fc:07:45:49: 4d:d9:a3:92:70:78:c7:47:ee:73:f0:fc:da:a2:a5:76:61:cc: 4f:d6:a2:43:80:db:04:70:71:94:01:4d:b4:91:c6:98:b3:b3: 14:4c:66:b7:1b:b7:1d:34:da:b9:20:00:d9:0f:e4:ed:5f:6d: b3:5d:27:62:04:c7:b8:58:5d:46:08:bc:56:ea:dd:c3:e8:b2: f8:ea:99:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoMkFFOTg1ODE1QTEwREQ2RDA0NTIzRkM4MUQ4REFGRDcy NkJFNzgxNjAeFw0yNTA3MTkwNzEyNTlaFw0yNTA3MjYwNzEyNTlaMBgxFjAUBgNV BAMTDTY4N2I0NTdiLTM2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCsVkfS2kZiTgykvgjlhLhobOddiPMY9FkKuPI2KxIhJqbqyzeP1eBCVGLdHdm n+s8PrPl1D8AKskMJAhSIfVQ1ijTiY1JjcgWNKCX71YTjp/7IeAlRQcWESdUgiSW YWjExuiUoQ3oG76kDzKTbwmhpgIn+wPv2GcpxL7psenBEO0fe1EpCoXISGYi6yS9 6xqg3XP69WmiUJpSnvXFRzTvYd+Xh25a1htJxw/pLoptMQ2RqjltXVFO6GlmHw7y cFYYKzXIzcMDzmtTavalhXRfcxDtKUFtLGKhYn6HFNPcGiJn3PVcuoKSv75gTkG8 +1gNnOTh3ipSaHc2cQ9Wh5XdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFXSuX/31 wZ5GL23zoeciTqfIV3swHwYDVR0jBBgwFoAUKumFgVoQ3W0EUj/IHY2v1ya+eBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2LzlBODZEQkQwQzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3VtRmdWb1EzVzBFVWpfSUhZMnYxeWEtZUJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2LzlBODZEQkQwQzk5QTExRUZCNENFRUYxRUM0RjlBRTAyL0t1bUZnVm9RM1cw RVVqX0lIWTJ2MXlhLWVCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPMBIAQUH1tiCXrqbOSYznWJeeRfShOsmLJ/J7uSNxmt3+G84AEhiXL cTeiqxJtEWdheQfslMXU/83x6LwglrEFGqREoLaef48p89h7PNtU/dBszmPAvMFb OxJ8LBanwr6340cM12lJ+r4+0WqtieAbjsd6ZlKdPNLZbX9tIMqPIJVdPLXROntZ d8DlJsKAbbu4KJNU5sjBMc3EsDnITTn3+kUo9qBkLOg5Gc/p7SJf/AdFSU3Zo5Jw eMdH7nPw/NqipXZhzE/WokOA2wRwcZQBTbSRxpizsxRMZrcbtx002rkgANkP5O1f bbNdJ2IEx7hYXUYIvFbq3cPosvjqmXA= -----END CERTIFICATE-----Generated at Sun Jul 20 18:50:11 2025 by rpki-client